Privacy

What the software does with your text: which layers stay on your machine, what leaves it, who else ever sees any of it, and how long it is kept.

Operator

JOESAN LIMITED

Address
UNIT 05, 12/F, THE CLOUD, NO. 111 TUNG CHAU STREET, TAI KOK TSUI, HONG KONG
Contact email
support@joesan.cc

The offline layers upload nothing

Local cache, offline dictionaries, translation memory, offline models, variant conversion. All five run on your machine, and your text doesn't leave the computer. If you'd rather check than take our word for it, put the machine into aeroplane mode and keep working: everything except the AI layer behaves exactly as it did a minute earlier, because none of it was calling out in the first place.

Only AI translation goes out

A sentence goes out only when the first four layers can't handle it. What we send is that passage, and it is used to produce the translation. We don't train models on it and we don't sell it on.

Your text isn't in the logs

Diagnostic logs are the runtime log the app writes on your computer: how it's running and the errors it hits. Source and translated text are never written to them. Neither are API keys, tokens or proxy credentials. The log stays on your machine and is never uploaded on its own. When you report a problem, the app first shows you the whole diagnostic bundle: app and OS versions, settings (without keys or proxy credentials), installed language packs, how many entries each local database holds, and the last lines of the log, with source text, translations and the user name in file paths already stripped. It goes only if you agree; if you don't, it isn't attached.

Keys aren't kept on your machine

AI translation comes from the server, so the app stores no API keys. A lost laptop or a rummaged backup can't take keys with it.

Local data is yours

History, translation memory, glossaries, word lists: all of it lives in a local database you can export or wipe whenever you like. There's no cloud sync, so moving to a new machine is a manual export and import. That's on purpose.

What we don't do

We don't sell data, build advertising profiles, run ads, or embed third-party trackers. There isn't a single analytics script on this site. Open your browser's network panel and you won't see a domain that isn't ours.

Only three third parties ever see anything

The model provider: we forward the sentences that reach the AI layer, and nothing else, to produce the translation. The payment processor: handles payment; your card number goes straight to them and never touches our servers. Bing's daily image: the login background, re-served from our server, so your browser never connects to Microsoft directly. There is no fourth.

How long anything is kept

Translated text isn't stored at all. The AI layer uses it and drops it, and nothing is written to a database. Usage counts (characters, requests) are kept for 13 months, because billing needs them. Diagnostic logs stay on your computer; we don't have them. A diagnostic bundle you agree to send with feedback, together with the IP address it came from, is deleted after 90 days; the feedback itself is kept for a year. Device records go when your account does, and so do the contact details, diagnostic bundles and IP addresses attached to your feedback.

What you can do at any time

Export your translation memory, your glossaries, your word lists. Wipe every local record. Delete your account. Deleting clears the account-side data; what's on your own disk goes when you uninstall. You don't need to ask us first.

If this policy changes

A substantive change asks you to confirm again the next time you open the app, rather than being slipped past you. A typo fix won't interrupt anyone. Every version carries a number and an effective date, and ships inside the app under Settings → About.

About accounts

  • Registration needs an email address, for verification codes and password recovery.
  • Once installed and signed in, we record device details: OS version, app version, interface language, IP address, browser identifier. We use them to diagnose platform-specific problems and to see what people actually run this on. Never for advertising, and never shared with third parties.
  • Usage records character counts and request counts, never content.
  • Payments are handled by the payment processor; our servers never see your card number.
  • Deleting your account clears everything held on our side. The local database was never ours to delete; uninstalling takes it.

Questions

“About → Send feedback” in the app reaches us directly, no sign-in needed. Before a diagnostic bundle is attached, the app shows you everything in it; it goes only if you agree, and otherwise only your message goes.

Privacy · JoesanTrans